$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft File: Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json) Hash identifier: kgwmlli7FB+7jHHZn+M+qLLWhNmDdfriTCwsvl6tlts= Subject key identifier: A4:C1:98:14:05:E0:35:6E:94:3D:EE:92:D8:12:3D:BF:20:98:8F:97 Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F Certificate issuer: /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft Manifest number: 0156 Signing time: Tue 01 Jul 2025 04:34:00 +0000 Manifest this update: Tue 01 Jul 2025 04:34:00 +0000 Manifest next update: Tue 08 Jul 2025 04:34:00 +0000 Files and hashes: 1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: 0fPLWeCZUGQaeFKgZAL/TYeZw5XWttUMd/ll7sFaniU=) 2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: AVNsCvyoIWNnSL3EVkTgsABpIGwTqMix3+lKD39yw+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343, serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Validity Not Before: Jul 1 04:34:00 2025 GMT Not After : Jul 8 04:34:00 2025 GMT Subject: CN=68636538-3dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:20:4d:52:d6:6d:a8:89:50:e1:29:6a:ad: 65:f5:dd:0c:fb:4a:5f:5c:eb:d9:ba:04:de:c0:dc: 1c:e7:f7:ea:f1:c2:5e:03:99:8d:70:80:b6:2c:22: d5:ac:e3:01:3c:8c:8b:4d:53:dc:19:47:79:ad:5e: ca:e7:65:d5:eb:e8:4e:9e:cd:bf:aa:93:6a:ca:73: b2:01:f2:c1:2b:c3:83:a5:c0:f2:79:4d:9c:a6:95: 9e:62:d0:d4:70:a2:82:1d:5a:53:1f:84:e3:83:a4: b2:cd:46:28:83:35:d9:50:52:2c:21:5e:75:eb:e9: 81:7e:4c:07:48:c5:49:ac:70:32:3b:f5:a7:27:ef: 0d:98:f9:2f:34:dd:ce:05:2e:4e:1c:36:65:a6:ba: c6:a2:7d:44:10:77:97:1e:dd:ff:1c:62:5c:d6:da: 3f:2e:b8:e3:08:00:a0:b1:81:1c:2a:39:86:e6:29: bb:fa:3b:48:a8:db:7f:62:ea:08:06:69:71:cb:e2: 56:84:30:c9:cc:ac:0e:85:6a:d5:a9:63:56:74:25: f5:c7:62:80:db:9c:38:b1:d2:57:29:88:aa:03:37: 59:88:ad:93:2f:87:6b:70:9a:5c:76:6e:0d:9a:46: 6c:d5:8e:69:f2:11:06:e2:23:5a:be:e3:5a:20:76: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C1:98:14:05:E0:35:6E:94:3D:EE:92:D8:12:3D:BF:20:98:8F:97 X509v3 Authority Key Identifier: keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:32:7d:16:d3:5c:76:d5:19:41:d4:a8:dd:0b:6a:20:25:e6: e5:bd:75:4a:50:9e:04:31:fa:aa:ac:2e:9a:4f:a5:26:a4:5a: a2:f9:98:d2:55:f9:e2:01:6b:c2:31:08:6c:74:b5:16:a9:a8: 4c:88:04:62:96:61:34:20:ed:24:5d:5f:c1:65:f5:90:54:f2: f6:07:4e:bc:31:e7:5c:a1:ba:a5:4a:e5:17:79:09:5b:a7:c3: d8:51:78:d7:e6:8f:09:64:03:c6:6d:75:70:db:0e:12:08:01: 70:a2:0e:da:da:48:6c:8d:cd:e7:a7:ca:80:98:12:9f:8f:e6: a6:f2:d1:07:b1:0a:95:46:67:01:95:2e:59:0a:81:af:6c:58: 09:35:bc:21:a9:fd:d1:64:39:da:7b:56:aa:0e:c8:7a:dd:18: 06:2f:72:ae:10:5d:25:dc:a8:1c:64:9e:46:e7:eb:e4:77:4e: 64:d3:99:87:5f:7d:27:07:fd:5a:cf:08:af:ec:25:2a:ba:48: 69:ac:b3:d4:b6:df:3c:cc:34:62:7f:53:64:7b:66:b0:8b:18: 1d:72:9d:9d:c2:98:61:0f:3d:38:f0:18:e9:c5:aa:00:e8:4c: 25:d0:55:15:4d:e4:7a:51:21:f0:0d:c3:67:d9:8c:fb:6b:1e: 2e:a7:2f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDQ1RkE2RUVCRTFERUE1MjJDMDQ0NDNDRjI1MjlFOTc3 OUE5OEQ4OEYwHhcNMjUwNzAxMDQzNDAwWhcNMjUwNzA4MDQzNDAwWjAYMRYwFAYD VQQDEw02ODYzNjUzOC0zZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiwgTVLWbaiJUOEpaq1l9d0M+0pfXOvZugTewNwc5/fq8cJeA5mNcIC2LCLV rOMBPIyLTVPcGUd5rV7K52XV6+hOns2/qpNqynOyAfLBK8ODpcDyeU2cppWeYtDU cKKCHVpTH4Tjg6SyzUYogzXZUFIsIV516+mBfkwHSMVJrHAyO/WnJ+8NmPkvNN3O BS5OHDZlprrGon1EEHeXHt3/HGJc1to/LrjjCACgsYEcKjmG5im7+jtIqNt/YuoI Bmlxy+JWhDDJzKwOhWrVqWNWdCX1x2KA25w4sdJXKYiqAzdZiK2TL4drcJpcdm4N mkZs1Y5p8hEG4iNavuNaIHbHNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTBmBQF 4DVulD3uktgSPb8gmI+XMB8GA1UdIwQYMBaAFEX6buvh3qUiwERDzyUp6XeamNiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8wRDEwRjdCMjRC QzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBTTEFSRVBQSlNucGQ1cVky STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JmcHU2LUhlcFNMQVJFUFBKU25wZDVxWTJJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8wRDEwRjdCMjRCQzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBT TEFSRVBQSlNucGQ1cVkySTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGMn0W01x21RlB1KjdC2ogJeblvXVKUJ4EMfqqrC6aT6UmpFqi+ZjS VfniAWvCMQhsdLUWqahMiARilmE0IO0kXV/BZfWQVPL2B068MedcobqlSuUXeQlb p8PYUXjX5o8JZAPGbXVw2w4SCAFwog7a2khsjc3np8qAmBKfj+am8tEHsQqVRmcB lS5ZCoGvbFgJNbwhqf3RZDnae1aqDsh63RgGL3KuEF0l3KgcZJ5G5+vkd05k05mH X30nB/1azwiv7CUqukhprLPUtt88zDRif1Nke2awixgdcp2dwphhDz048BjpxaoA 6Ewl0FUVTeR6USHwDcNn2Yz7ax4upy92 -----END CERTIFICATE-----Generated at Wed Jul 2 15:05:18 2025 by rpki-client